Drop TODO - pymongo 2.6.3 fixes the CVE.